Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/vUJfPOFINPz_DA2jLGIYSAwKU80.roa
File:                     vUJfPOFINPz_DA2jLGIYSAwKU80.roa (raw, json)
Hash identifier:          S8TkAAl1l+d8yc8NAbeWkVQUZJleQkcyfTrpDMrIhJ0=
Subject key identifier:   BD:42:5F:3C:E1:48:34:FC:FF:0C:0D:A3:2C:62:18:48:0C:0A:53:CD
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       81
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/vUJfPOFINPz_DA2jLGIYSAwKU80.roa
Signing time:             Sun 01 May 2022 01:30:14 +0000
ROA not before:           Sun 01 May 2022 01:30:14 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     9607
IP address blocks:        203.141.48.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May  1 01:30:14 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=BD425F3CE14834FCFF0C0DA32C6218480C0A53CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:c3:f6:4c:eb:0e:cf:67:6c:cb:99:de:43:
                    9a:ee:59:7c:3c:50:e7:94:2e:cf:d0:da:4d:32:26:
                    d6:b5:cd:0c:05:c1:4d:4d:55:f4:87:e7:75:c8:1a:
                    a6:f1:c9:6f:2e:0f:a5:78:e0:9d:0a:00:c9:d3:27:
                    fb:f9:b8:f5:b9:7f:31:d2:c7:f8:47:fc:81:2a:5d:
                    b3:6a:ec:7a:c6:87:06:e9:b6:9d:cb:5a:42:33:98:
                    87:d4:8c:70:f4:dd:5e:a6:55:06:a4:56:e9:c3:cc:
                    87:da:f2:38:cd:10:84:58:50:69:82:7b:56:4c:58:
                    4e:1c:36:c2:60:1a:77:15:4c:5e:ff:5e:59:c1:7a:
                    c2:d5:2e:c8:e4:1c:a6:ef:22:38:fe:0c:ad:aa:ce:
                    ec:d6:53:6a:a2:0f:5d:8d:30:ef:f1:a9:2a:4d:e5:
                    83:65:e4:be:7b:70:58:52:eb:3d:ef:11:20:0d:70:
                    4c:b2:ac:63:ba:73:db:0d:8e:af:22:ee:ad:ab:80:
                    41:e3:44:22:e1:37:76:6b:67:41:c1:06:86:53:08:
                    fd:38:a6:5c:c2:39:e7:f8:4d:6e:17:de:ec:26:48:
                    4a:4c:4a:10:3b:07:74:17:af:a7:e9:46:fe:c8:f6:
                    86:ed:c4:76:63:c5:bd:09:b3:c5:c0:3a:89:5d:bd:
                    3d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:42:5F:3C:E1:48:34:FC:FF:0C:0D:A3:2C:62:18:48:0C:0A:53:CD
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/vUJfPOFINPz_DA2jLGIYSAwKU80.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:fc:cc:20:d1:19:d4:8f:6b:8e:fe:93:1b:66:f8:3e:b2:e5:
         de:aa:28:69:08:58:46:92:57:d4:dc:e1:3a:14:36:d0:28:f0:
         5d:d0:81:11:7f:53:c5:57:fa:e0:91:ec:be:61:47:87:ee:fd:
         93:ee:ca:8c:e2:74:2a:1a:77:8e:24:ee:82:13:6e:da:50:c7:
         c4:3f:eb:e1:b9:c0:21:96:93:19:c1:74:45:d4:a7:7a:5b:52:
         77:da:70:f0:7e:44:6e:e5:f4:a8:e8:f1:b1:dc:23:4a:99:86:
         df:02:70:a9:36:d1:43:23:2d:eb:d7:28:be:6a:55:1c:e8:6b:
         f8:f9:c4:3e:a2:dc:aa:ea:2f:7e:fb:3f:80:b2:4c:75:e7:52:
         c5:e5:45:6c:25:fd:70:cd:47:f6:a2:b8:56:1c:c9:07:da:29:
         44:d4:d3:86:c8:7a:f0:c2:12:8e:06:27:17:6d:61:ef:1c:95:
         6f:69:e9:6c:a8:b8:eb:9d:87:79:c7:42:b6:19:35:e2:18:4b:
         b1:43:8f:da:c7:35:9d:f3:db:08:61:8f:6a:19:ff:c4:b4:84:
         37:a0:34:a0:4c:a1:29:35:a1:3e:18:bd:f4:32:89:8a:c0:d9:
         a0:40:10:10:c9:f5:b3:b3:a3:12:15:ec:29:28:40:b0:63:22:
         a6:73:6c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org